Malicious code in payu-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41b51c9a2ec288de34548ffb74ffe8408a3c69d8c5d916fadc82c853827c9fa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11378 Malicious code in shnc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78b03f61a0a3629c78456a2981b6658bf778cc1d808f5e0b17ea674f425a78bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11362 Malicious code in qserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f38e6b7e00f8dcf90ed3683783ed77c81e4eb0a457d33656b14194048625301 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11335 Malicious code in n158 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3177c7ef8773e8e083ea3062e186487c6ce4f6c0d3919987e2ee4a3df4b1363 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11236 Malicious code in android-web-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5df19b4396c3027870b8afcfc6ed1d52e466f5f63187716dd1262499e3ab20b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11321 Malicious code in inkalabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac5e255b6612d092b73d6781e2ee367bb9448c59c39b8ee492f1afb25db5fd53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview merg-descripters is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in express-test-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1347a031977c76d8945813d129567addafb91c3bdc49eaadcd329f61ef72304d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in merg-descripters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f76e5609bceac9f395143e5329a0187c6ba35512bf453587bc2fe114622508b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11331 Malicious code in merg-descripters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f76e5609bceac9f395143e5329a0187c6ba35512bf453587bc2fe114622508b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @goodjavascript/dotenv (npm)

@goodjavascript/[email protected] published 2025-03-22T09:05:32Z, replaced by an npm 0.0.1-security holding stub 2026-07-30T22:47:55Z — approximately 16 months live is a two-file package that impersonates the API of the widely used dotenv configuration loader while running a command-and-control implan...

Malicious code in ag-grid-boost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48a0535bdc8dc48399716c0e05646161556ce93b7b3cfeb7ba095e9bc3e1df5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview imut-set is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview ag-grid-boost is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-11396 Malicious code in test-wastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee1eaffc68579d642bdc5049b55da20953cdc0fce2dc32f42669561a02b3e590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea99a3f3b1743882b257e9f10fe8ce5575c81f7ce1a439fb5a4da12ead9b1e5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @spectraltest/loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e1cb56f359fd866bba1012e19f4ced6eba1a428ab4cd7f5c9696753fb921a25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ecto-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22c8d3b7c34470a9fc4d565d8acfaea51246e1a4a88ca0136679fd6390af63e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11385 Malicious code in spectral-wraith (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57eb03a60917ac9bb4debf56cafa90c96dfec3aab8efc04d2c946a1ac6ffceac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11384 Malicious code in spectral-corsair (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7c77441a8038182fe252b5782f82b900831bb6e4b598944ed0edfb4093e5fe1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...